This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer (raw, json) Hash identifier: LoeuAGTZSWZTlCJj4z9mH4ak5lbqZOE59USZW2KgZjk= Subject key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019B7F833FD5726F7787C357BF35E1E9BAFC Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Fri 02 Jan 2026 16:21:06 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 9180 IP: 195.214.224.0/21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:3f:d5:72:6f:77:87:c3:57:bf:35:e1:e9:ba:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 2 16:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b094780ffbb06b7b57f0214e84552b964c5041d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a6:cd:b0:56:c7:33:63:93:a5:83:d0:35:34: ca:1a:fd:8a:ed:d4:9d:7f:35:c7:0b:f8:ca:ae:55: a9:0e:b2:37:54:db:7f:f3:ff:ed:88:cd:6d:bd:e1: 96:82:c8:e4:73:c7:52:e0:4f:ec:71:65:cc:90:02: 73:0c:33:8d:1b:c9:8d:c5:71:21:66:16:85:9a:36: 03:ff:39:95:ca:f0:5b:2b:93:d8:d5:16:52:cc:2b: bc:4e:43:1e:c1:8a:b1:19:b6:c4:33:ab:3e:f0:91: 29:f5:8e:4e:fc:c9:94:0f:4b:ea:3b:b6:0a:87:99: 3e:10:04:e5:ad:be:69:11:47:1b:44:ee:47:f4:8d: 6a:87:ee:ba:70:ed:62:b1:c6:7b:e6:3b:6a:c3:5a: fd:b9:e6:11:34:20:4c:cc:35:3e:8c:8f:54:98:83: 9d:22:08:a2:c5:94:58:ac:33:c9:6c:7e:43:06:ff: f9:88:b0:bf:1e:17:fc:9b:78:b9:4f:01:3e:31:ce: cc:5a:7d:ec:87:0d:15:88:9c:a9:bd:9d:42:3e:36: 11:6e:d0:11:9f:54:20:6a:46:81:c1:c3:9c:e6:6d: 66:5f:6f:97:a7:39:1f:d5:91:0c:74:c9:0c:35:4e: 0f:76:92:67:30:94:2b:9f:3b:cc:5b:2d:17:f6:91: 61:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.214.224.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 9180 Signature Algorithm: sha256WithRSAEncryption 6e:30:20:59:a7:53:1d:5a:9d:c6:0b:96:ab:51:b9:21:2a:ad: 50:19:ee:33:57:e8:82:83:70:8d:68:83:f0:e8:9e:1d:de:26: 61:70:48:6d:1d:91:29:80:a0:3d:df:85:33:26:e2:10:4b:e0: 30:dd:ad:af:3b:34:a6:4f:db:c5:af:85:0c:7a:c9:ff:b6:84: a9:b7:fc:cb:6f:d0:e0:e2:16:ef:b2:e1:7e:80:e5:4c:7a:f7: 03:18:1d:d8:b6:4d:bd:49:78:e4:44:09:67:8f:d3:07:39:67: e4:5e:9f:86:e0:44:62:a0:1d:ec:45:d0:dc:f4:af:dd:84:bb: 0e:18:47:1c:19:9a:fb:f5:3d:40:e4:62:82:60:c5:34:93:42: d8:a0:b8:ac:3a:81:10:8b:d4:15:12:90:01:12:b8:c1:63:27: f5:4a:bd:48:9a:8c:20:26:4d:36:dd:40:e1:fe:d5:4d:60:91: 71:b4:5c:91:cb:da:d1:75:16:a2:51:d5:78:0a:2f:64:bc:d2: 47:df:6a:33:da:21:bc:12:49:6f:bb:47:ea:76:83:9c:65:39: d0:e5:4e:b6:e5:a3:b7:a4:ce:01:f7:dd:d9:b9:da:7a:46:c9: 04:8d:93:4e:c4:d1:1b:5f:d5:3b:6d:4d:a5:ff:a4:94:c0:78: cd:f0:2a:1a -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt/gz/Vcm93h8NXvzXh6br8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTAyMTYyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDk0NzgwZmZiYjA2YjdiNTdmMDIxNGU4NDU1MmI5NjRjNTA0MWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6bNsFbHM2OTpYPQNTTKGv2K7dSd fzXHC/jKrlWpDrI3VNt/8//tiM1tveGWgsjkc8dS4E/scWXMkAJzDDONG8mNxXEh ZhaFmjYD/zmVyvBbK5PY1RZSzCu8TkMewYqxGbbEM6s+8JEp9Y5O/MmUD0vqO7YK h5k+EATlrb5pEUcbRO5H9I1qh+66cO1iscZ75jtqw1r9ueYRNCBMzDU+jI9UmIOd IgiixZRYrDPJbH5DBv/5iLC/Hhf8m3i5TwE+Mc7MWn3shw0ViJypvZ1CPjYRbtAR n1QgakaBwcOc5m1mX2+Xpzkf1ZEMdMkMNU4PdpJnMJQrnzvMWy0X9pFhTQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFLCUeA/7sGt7V/AhToRVK5ZMUEHWMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzY2ODNj YS1hNjg4LTQxNDEtYWQ0MS04YWRmMGRhMjI1NDUvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNjY4M2Nh LWE2ODgtNDE0MS1hZDQxLThhZGYwZGEyMjU0NS8xL3NKUjREX3V3YTN0WDhDRk9o RlVybGt4UVFkWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF BwEHAQH/BBAwDjAMBAIAATAGAwQDw9bgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AiPcMA0GCSqGSIb3DQEBCwUAA4IBAQBuMCBZp1MdWp3GC5arUbkhKq1QGe4zV+iC g3CNaIPw6J4d3iZhcEhtHZEpgKA934UzJuIQS+Aw3a2vOzSmT9vFr4UMesn/toSp t/zLb9Dg4hbvsuF+gOVMevcDGB3Ytk29SXjkRAlnj9MHOWfkXp+G4ERioB3sRdDc 9K/dhLsOGEccGZr79T1A5GKCYMU0k0LYoLisOoEQi9QVEpABErjBYyf1Sr1Imowg Jk023UDh/tVNYJFxtFyRy9rRdRaiUdV4Ci9kvNJH32oz2iG8Eklvu0fqdoOcZTnQ 5U625aO3pM4B993Zudp6RskEjZNOxNEbX9U7bU2l/6SUwHjN8Coa -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:37 2026 by rpki-client